From 4c468bfc1d595f2b8425118b805b5f2284c9dbe5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:24:22 +0100 Subject: [PATCH 1/5] chore(deps): bump actions/setup-java from 4 to 5 (#66) --- .github/workflows/ci-pr.yml | 4 ++-- .github/workflows/release.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml index 232b929..c534cfa 100644 --- a/.github/workflows/ci-pr.yml +++ b/.github/workflows/ci-pr.yml @@ -14,7 +14,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Set up JDK 21 - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: java-version: '21' distribution: 'temurin' @@ -28,7 +28,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Set up JDK 21 - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: java-version: '21' distribution: 'temurin' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 82d2178..3fc5e54 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: - name: Checkout code uses: actions/checkout@v4 - name: Setup Java/Maven - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: java-version: 21 distribution: "temurin" From cb7d9a5bee53fb53e35d5b8527409fa0a50c5acb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:27:10 +0100 Subject: [PATCH 2/5] chore(deps): bump actions/checkout from 4 to 7 (#90) --- .github/workflows/ci-pr.yml | 4 ++-- .github/workflows/oss-checker.yml | 6 +++--- .github/workflows/publish-github-release.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml index c534cfa..8020654 100644 --- a/.github/workflows/ci-pr.yml +++ b/.github/workflows/ci-pr.yml @@ -12,7 +12,7 @@ jobs: env: MAVEN_CLI_OPTS: "--batch-mode --no-transfer-progress" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up JDK 21 uses: actions/setup-java@v5 with: @@ -26,7 +26,7 @@ jobs: env: MAVEN_CLI_OPTS: "--batch-mode --no-transfer-progress" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up JDK 21 uses: actions/setup-java@v5 with: diff --git a/.github/workflows/oss-checker.yml b/.github/workflows/oss-checker.yml index dc6e45f..92b5ad3 100644 --- a/.github/workflows/oss-checker.yml +++ b/.github/workflows/oss-checker.yml @@ -46,19 +46,19 @@ jobs: permission-contents: read - name: Checkout target repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: token: ${{ steps.target_token.outputs.token }} - name: Checkout OSPO source repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: National-Node-Net/ospo-resources path: ospo-resources token: ${{ steps.ospo_token.outputs.token }} - name: Checkout archetypes source repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: National-Node-Net/archetypes path: archetypes diff --git a/.github/workflows/publish-github-release.yml b/.github/workflows/publish-github-release.yml index 3f32ba1..ba43832 100644 --- a/.github/workflows/publish-github-release.yml +++ b/.github/workflows/publish-github-release.yml @@ -73,7 +73,7 @@ jobs: needs: [versioning] steps: - name: Checkout Code - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Generate SPDX SBOM env: @@ -105,7 +105,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3fc5e54..2625d76 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,7 +18,7 @@ jobs: MAVEN_CLI_OPTS: "--batch-mode --no-transfer-progress" steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Java/Maven uses: actions/setup-java@v5 with: @@ -41,7 +41,7 @@ jobs: id-token: write steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Get repo name id: get-repo run: echo "docker_repo=${GITHUB_REPOSITORY,,}" >> $GITHUB_OUTPUT From 25807f432f701a3a8aa83efa50cb80b309c23c61 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:27:30 +0100 Subject: [PATCH 3/5] chore(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 (#102) --- .github/workflows/publish-github-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish-github-release.yml b/.github/workflows/publish-github-release.yml index ba43832..868bf72 100644 --- a/.github/workflows/publish-github-release.yml +++ b/.github/workflows/publish-github-release.yml @@ -135,7 +135,7 @@ jobs: name: sbom - name: Create GitHub Release - uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1 + uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 with: tag_name: "v${{ needs.versioning.outputs.version }}" name: "Release v${{ needs.versioning.outputs.version }}" From d1d648ba7f5da95a3a51572efeb09ce24f25caf2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:27:57 +0100 Subject: [PATCH 4/5] chore(deps): bump docker/login-action from 3 to 4 (#103) --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2625d76..cbaf5cf 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -46,7 +46,7 @@ jobs: id: get-repo run: echo "docker_repo=${GITHUB_REPOSITORY,,}" >> $GITHUB_OUTPUT - name: Login to ghcr.io - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} From ce2badd061c0d8399160aff98555cf2455afa5de Mon Sep 17 00:00:00 2001 From: syed-awsaf-informed Date: Wed, 12 Aug 2026 08:47:57 +0100 Subject: [PATCH 5/5] chore: update changelog for GitHub Actions version updates (#104) --- CHANGELOG.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 91e90f1..a9af4b5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -20,6 +20,13 @@ This project follows **Semantic Versioning (SemVer)** ([semver.org](https://semv --- +## [0.90.5] – 2026-08-11 + +### Changed +- Updated GitHub Actions to latest versions. + +--- + ## [0.90.4] – 2026-07-16 ### Changed